Overview

overview

9

Static

static

5

file.exe

windows7-x64

9

file.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    896KB

  • Sample

    240823-wa5xvazenl

  • MD5

    2738ce21cf81c164178dfd3f6d25eec1

  • SHA1

    215543dce12a9650d387179e7bb7233ffede07a4

  • SHA256

    8c42db72578b924a8100e0797ce1249c067c87b41327d7fffa9d53813864557f

  • SHA512

    9c4ffcdd783c2b721eb46acc8db5ce8626a93548a2d386e9108b6e7914ed8b359c24d75b9704be58449daf3386b3e28f3aac8bd7afa820561a8685d70204d031

  • SSDEEP

    12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarTR:rqDEvCTbMWu7rQYlBQcBiT6rprG8avR

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      896KB

    • MD5

      2738ce21cf81c164178dfd3f6d25eec1

    • SHA1

      215543dce12a9650d387179e7bb7233ffede07a4

    • SHA256

      8c42db72578b924a8100e0797ce1249c067c87b41327d7fffa9d53813864557f

    • SHA512

      9c4ffcdd783c2b721eb46acc8db5ce8626a93548a2d386e9108b6e7914ed8b359c24d75b9704be58449daf3386b3e28f3aac8bd7afa820561a8685d70204d031

    • SSDEEP

      12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarTR:rqDEvCTbMWu7rQYlBQcBiT6rprG8avR

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks